StormySkyes 0 Posted January 22, 2018 Share Posted January 22, 2018 I was monitoring my gpu while using the desktop app in windows 10 and low an behold I found a cryptocurrency miner running under your name! I reread your eula and nothing in it stated this. Not cool. So either you installed this without my permission or someone hacked this into your code. I have traced this to your base installation and not any addons as it runs on three different test systems isolated to clean installs. I highly recommend you remove this immediately. Link to post
Administrator Shane D. 1,317 Posted January 23, 2018 Administrator Share Posted January 23, 2018 @StormySkyes Thank you for letting me know. I've alerted our Security Team to take a look. I'll let you know if they find anything. Link to post
Evernote Staff Xiaoyong Wu 0 Posted January 25, 2018 Evernote Staff Share Posted January 25, 2018 Hi, @StormySkyes I work on application security at Evernote and am investigating this. Can you provide some the following information regarding what you found out as we were not able to identify anything malicious in our binary? The version of the Evernote Windows client you are running and where you installed it from. Other than Windows 10 GPU monitor, are you using other tools to test the GPU usage? How do you determine that it is Evernote Window client that was running a cryptocurrency miner? And, do you have a specific Windows binary name from Evernote? Which cryptocurrency minor did you identify? Thanks again for reporting this to us. Link to post
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now